Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host.
| Software | From | Fixed in |
|---|---|---|
| nagios / log_server | - | 2024 |
| nagios / log_server | 2024-r1 | 2024-r1.x |
| nagios / log_server | 2024-r1.0.1 | 2024-r1.0.1.x |